Privacy Policy Statement

KDDI recognizes of the importance of personal data and customer information. This Privacy Policy explains how we collect, use, and disclose personal data that we obtain from individuals visiting our website or using our services. We are committed to protecting your privacy and complying with applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR), Federal Data protection Act (BDSG), the Telecommunications Act (TKG), and other relevant data protection regulations. Information about the use of cookies and similar technologies is provided separately in our Cookie Policy, in accordance with the Telecommunications Digital Services Data Protection Act (TDDDG)

This privacy policy is publicly accessible. KDDI explicitly commits to adhering to its provisions and to consistently ensuring the protection of personal data.

Legal Notice (Impressum) 
Company Name: KDDI Deutschland
Legal form: GmbH
Managing Director(s): Mr. Taketoshi Arika
Business Address: Fritz-Vomfelde-Str. 8, 40547 Düsseldorf
Phone Number: +49 211 93698-0

KDDI may collect personal data from you when you visit our website or use our services. In accordance with our legitimate interests (pursuant to Art. 6 para. 1 lit. f GDPR), we collect data related to access and usage of the website. KDDI processes all personal data in compliance with the principles of lawfulness, fairness, and transparency as defined in the General Data Protection Regulation (GDPR).

Depending on how you interact with our website, we may collect the following types of personal data:

• Name,
• Address.
• telephone number,
• and email address (where provided by you)

We may use the personal data we collect for the following purposes:

• To provide and improve our services – Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract)
• To communicate with you and respond to your inquiries – Art. 6(1)(b) GDPR
• To send you promotional materials and updates – Art. 6(1)(a) GDPR, only with your explicit consent
• To comply with legal obligations – Art. 6(1)(c) GDPR

KDDI will not process personal data in its possession beyond what is necessary to fulfil the intended purpose of use, except in the following cases:

KDDI takes technical and organizational measures to manage access to personal information, restrict processing activities, and prevent unauthorized disclosure, loss, or destruction (hereinafter referred to as " Data Breach.") and implements other necessary and appropriate measures (hereinafter referred to as "KDDI Data Protection Policy" (“öffentliches Verfahrensverzeichnis”)) in order to ensure the secure processing of personal data.

KDDI Data Protection Policy is classified into two major categories, Technical Protection Measures and Organizational Protection Measures, and each category is implemented an appropriate and effective manner.

We take appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. These measures are designed to protect personal data against unauthorised disclosure or access, loss, or alteration. However, please note that no method of transmission over the internet or electronic storage is completely secure, and absolute security cannot be guaranteed.

We may disclose personal information to third parties in the following circumstances:

• Service providers and business partners who assist us in delivering our services
• Law enforcement authorities or government agencies to comply with legal obligations or protect our rights
• Other parties with your consent or as required by law

KDDI will respond, to requests from customer, or from a party acting on behalf of the customer, for the disclosure of applicable personal data without undue delay and in any event within one month, in accordance with Article 12(3) of the GDPR. - except in the following cases:

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law

You have certain rights regarding your personal data under the GDPR and TDDDG:

In accordance with Article 15 GDPR, you have the right at any time to obtain free information from KDDI Deutschland GmbH on the data stored about you
In accordance with Articles 16, 17, 18 GDPR, you may at any time request the rectification, deletion and restriction of the processing of individual personal data to KDDI Deutschland GmbH. In addition, you have the right to data portability under Art. 20 DSGVO.
To exercise your rights, please contact us using the information provided below.
You have the right to receive your personal data processed by KDDI Deutschland GmbH in a structured, commonly used and machine-readable format.
In accordance with Article 22 GDPR, there is no automated decision-making including profiling in the course of data processing by KDDI Deutschland GmbH.

In accordance with Article 77 GDPR, you have the right to complain to a supervisory authority at any time if you believe that the processing of your data violates the regulation. The data protection authority responsible for KDDI Deutschland GmbH is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Telefon: 0211/38424-0
Fax: 0211/38424-999
E-Mail: poststelle@ldi.nrw.de
PO Box 20 04 44
40102 Düsseldorf

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our processing activities or legal obligations. Any updates will be published on this website and will take effect upon publication, unless otherwise required by applicable law. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your personal data. The current version is indicated by the “Last updated” date above.

Complaints regarding KDDI handling of personal information (usage, provision, disclosure, amendments, etc.) can be made by the following means: